VMware Carbon Black Cloud Workload 1.2 Release Notes

VMware Carbon Black Cloud Workload 1.2 | 21 APR 2022 | Build 19532921 Check for additions and updates to these release notes.

Overview

VMware Carbon Black Cloud Workload is a data center security product that protects your workloads running in a virtualized environment. It provides an ability to ensure workloads have built-in protection making security intrinsic to the virtualized environment. It includes core capabilities such as agent-less delivery, inventory, lifecycle management, vulnerability assessment, and remediation. It also includes endpoint protection capabilities such as next-gen antivirus, real-time threat hunting and endpoint detect and response. For more information, see:

• VMware Carbon Black Cloud Workload Product Page
• VMware Carbon Black Cloud Workload Guide
• Carbon Black Cloud Console Release Notes

What's New

The VMware Carbon Black Cloud Workload appliance 1.2 is a maintenance release containing security updates and improvements based on customer feedback.

• Carbon Black Cloud Registration Enhancement

  As a Carbon Black Cloud Workload Admin user, you can now register your appliance with the Carbon Black Cloud console using a simplified registration workflow by providing minimal required information to the Carbon Black Cloud.

• Password Expiration Management

  With this release, Carbon Black Cloud Workload appliance and Carbon Black Cloud Workload plug-in UI display a notification on your root password expiration.

  To reset or extend your password, see Maintaining the Appliance Password.

• Carbon Black Cloud Workload Proxy Enhancement

  You can now verify if the proxy connects the appliance to the Carbon Black Cloud environment.

• NSX-T Integration Enhancement

  The NSX-T integration now provides support for vSphere Distributed Switch created in the vCenter Server (CVDS).

• Library migration

  To further address the CVE-2021-44228 security risk, the Carbon Black Cloud Workload appliance migrated its logging library from log4J to logback.

Limitations

The Carbon Black Cloud Workload appliance does not support NSX with version 4.0.0.1.

Resolved Issues

The following issues were resolved in this release:

• Appliance reboot no longer generates certificates if old ones exist

  After an upgrade or install of a Carbon Black Cloud Workload appliance, reboot of the appliance caused the generation of new certificates even if such already existed. As a result, the vCenter Server detected a mismatch in the thumbprint and prevented the Carbon Black Cloud Workload plug-in from working.

Known Issues

• Carbon Black Cloud Workload appliance might show with outdated Last Checkin time

  The Carbon Black Cloud Workload appliance status visible on the Settings > API Access page from the Carbon Black Cloud console might report with an outdated Last Checkin time.

  Workaround: None

• Carbon Black Cloud console displays unreachable appliance as eligible

  On the Carbon Black Cloud console, from the Inventory > Workloads > Not Enabled tab, you can filter VMs based on the Eligibility status. Some eligible VMs are listed with a note 'Not eligible. Unreachable appliance' if the on-premise appliance is unable to communicate with the Carbon Black Cloud. Even though the appliance is unreachable, the Carbon Black Cloud console displays the unreachable appliance under the Eligible filter.

  Workaround: None

• Upgrading Carbon Black Cloud Workload appliance fails when there is discrepancy between the appliance version in Carbon Black Cloud and the actual appliance version

  Workaround: Carbon Black Cloud and the Carbon Black Cloud Workload appliance must be always in sync on the appliance version. For example, to upgrade successfully the appliance from versio 1.0.2 to version 1.1.2, make sure the version of the appliance is 1.0.2 in the cloud as well.

• Upgrading Carbon Black Cloud Workload appliance fails if it is not registered with the vCenter Server

  Workaround: Register the appliance with the vCenter Server prior upgrading it to version 1.2. For details, see Register Appliance with vCenter Server.

• Installing Host User World fails if the proxy server is configured

  Proxy support is not implemented in the Host User World installer. If you configure proxy settings for the Carbon Black Cloud Workload appliance, the Host User World installation fails with the error HOST_MODULE_DOWNLOAD_FAILED_ON_APPLIANCE.

• Carbon Black Cloud Workload appliance shows wrong status for Carbon Black Plugin field after an upgrade

  After an upgrade to Carbon Black Cloud Workload appliance 1.2, an error displays in the appliance Dashboard > Carbon Black Plugin field indicating that the plugin is not installed; however, the plugin has been installed properly.

  Workaround: Re-register your appliance with Carbon Black Cloud. For more details, see Register Carbon Black Cloud Workload Appliance with Carbon Black Cloud.

• The sshd process does not start intermittently after appliance deployment

  When the SSH server process does not start on the newly deployed appliance, an error message displays: ssh: connect to host 10.102.39.237 port 22: Connection refused.